<%
'#################################################################################
'## UnWritten Open Source Blog Engine
'#################################################################################
'## Copyright (C) 2008 Luigi Violin
'##
'## This program is free software: you can redistribute it and/or modify
'## it under the terms of the GNU General Public License as published by
'## the Free Software Foundation, either version 2 of the License, or
'## (at your option) any later version.
'##
'## This program is distributed in the hope that it will be useful,
'## but WITHOUT ANY WARRANTY; without even the implied warranty of
'## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
'## GNU General Public License for more details.
'##
'## You should have received a copy of the GNU General Public License
'## along with this program.  If not, see <http://www.gnu.org/licenses/>.
'##
'## You can obtain support from our forums at:
'##     <http://www.unwrittenblog.com/forums/>
'## Contact the author directly:
'##     <zaamit@hotmail.com/>
'##
'#################################################################################
%>
<!--#include virtual="/includes/core.asp"-->
<%
ora = now()
if request.form("action") = 1 then
'insert new
strsql = "insert into " & db_prefix & "polls(title,intro,date,date_gmt,status,expire_date,expire_date_gmt) " 
strsql = strsql & "values('" & replace(request.form("title"),"'","''") & "','" & replace(request.form("intro"),"'","''") & "','" & str2dat(ora) & "','" & str2dat(DateAdd("n", Application("GMToffset"), now())) & "','" & request.form("status") & "','" & str2dat(DateAdd("y", 10, now())) & "','" & str2dat(DateAdd("y", 10, now())) & "'"
strsql = strsql & ")"
'response.write strsql
dbConn.execute strsql
response.Write "<br /><br />"
'get newly inserted poll id
dbRS2.open "select id from " & db_prefix & "polls where title = '" & request.form("title") & "' and intro = '" & request.form("intro") & "' and date = '" & str2dat(ora) & "'",dbConn
updateOpt dBRS2("id")
dbRS2.close
else
'update existing
strsql = "update " & db_prefix & "polls set "
strsql = strsql & " title = '" & replace(request.form("title"),"'","''") & "', "
strsql = strsql & " intro = '" & replace(request.form("intro"),"'","''") & "', "
strsql = strsql & " status = " & request.form("status") & " "
strsql = strsql & " where id = " & request.form("id")
'response.Write strsql
dbConn.execute strsql
updateOpt request.form("id")
end if

'
Sub updateOpt(pollid)
dbConn.execute "delete from " & db_prefix & "polls_options where pollid = " & pollid
'insert poll options
for i = 1 to 5
	if request.Form("popt" & i) <> "" then
		strsql = "insert into " & db_prefix & "polls_options(pollid,text,votes) " 
		strsql = strsql & "values(" & pollid & ",'" & replace(request.form("popt" & i),"'","''") & "',0) "
		'response.Write i & " -- " & strsql & "<br>"
		dbConn.execute strsql
	end if
next
End Sub

Response.Redirect("/admin/poll-list.asp")
%>